-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 04 May 2026 01:08:28 +0200 Source: firewalld Architecture: source Version: 2.3.1-1+deb13u1 Distribution: trixie Urgency: medium Maintainer: Utopia Maintenance Team Changed-By: Michael Biebl Changes: firewalld (2.3.1-1+deb13u1) trixie; urgency=medium . * fix(policy): use PK_ACTION_CONFIG for set{ZoneSettings2,PolicySettings} This prevents local users from being able to modify runtime firewall state without prior authentication if the desktop policy is active. (CVE-2026-4948) Checksums-Sha1: eefff2e7653288574f9c57e70a7898c73c1cfd50 2509 firewalld_2.3.1-1+deb13u1.dsc f2975e612f43e8aafafa6a4a3ffe89eaeac3872a 11780 firewalld_2.3.1-1+deb13u1.debian.tar.xz 38f40b134c19feb793e6d1dd6d2790b2752eb559 6630 firewalld_2.3.1-1+deb13u1_source.buildinfo Checksums-Sha256: 015e45bf96cb2ed6ddb5f6e22b63d45b419b3f6b2c14e87ff6b890a84bb1e0a4 2509 firewalld_2.3.1-1+deb13u1.dsc 20bfd72087838dbacf5f396b735dd73ed08bd2eaf1ab28776e4cee83bb5758c2 11780 firewalld_2.3.1-1+deb13u1.debian.tar.xz 12eeccffb695a05aeacecf5253a7fc0e405e14a9fbc477521590f10dc9311f53 6630 firewalld_2.3.1-1+deb13u1_source.buildinfo Files: 2756d8339d3941e191c98a06728c9a4c 2509 net optional firewalld_2.3.1-1+deb13u1.dsc 0c93f2d6717bedc505542ea53cd48dc3 11780 net optional firewalld_2.3.1-1+deb13u1.debian.tar.xz ee3e2ff0d847150131929eb03d1af402 6630 net optional firewalld_2.3.1-1+deb13u1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEECbOsLssWnJBDRcxUauHfDWCPItwFAmn6KMUACgkQauHfDWCP ItxZBw//VEzcTaCiO/aytjmJi++ERCHvz0vyAWbdXyIJRSjk3T2WnungwrvlCe1f rFG94+5aynYQ5W4DOuaUB0GFukme0YX16sKlEZoOLVzVk3JYkq83Nfnnaexr6nFA VfXHyePSrqWNNa9UoTVF2qB2mgMDD6wKB83UtEzdx96+97kERXMj815xS39Jmq6v Rh5/QVary80UUjNKl2dcTkMk3G+69nEj4xh8CWAdEoKH117WIGm6wqCxmRu497zC D4ckp1s6UXU02xl1l1aBm8+Y/BXrNKANq0BSWTLPcgKSEKr/psfo4fwi/tem0qZW n1w898I4HKJCt7FOdtSsOIx6IxKsZPTnOZODp/exYkmobmMLQEEJ8VREWxF978YI RFRHtcsOcMszG4w4IoDfMgFwtYdpw/ohW3hXQIMyU2GD02AQ5exL6iMip2K65BCn fimD6TtfQBp8mCeGIDFytjsMJE4Owco4jcopckEMrJ5GvnpwYwUsm9MzNkze6Ozq S9P7TRZkaX3AJIyUSkgLnUnheG76BjiWPEefo6fRvlEsFgymD2oeQ2V0lWo98TcQ 0FGbmF6tvo5ueG0tROIYB5sxMURGxJtiKBAOIlBpHMWFRYVr39osh0PvH3Hqw+0B moHvJimzrMUIitavd3uF5tmFzgJCWHZcFLMJPHiCcT3N3gj2BB0= =fU/n -----END PGP SIGNATURE-----